- Published on
Internal AI tools touch real company data, real permissions, and sometimes real actions. Here is how to build one that is actually secure without adding unnecessary complexity.
Posts tagged "security"
All Posts
- til (75)
- bash (54)
- ai (39)
- rust (33)
- javascript (30)
- react (23)
- backend (16)
- performance (13)
- distributed-systems (11)
- web-development (11)
- typescript (10)
- best-practices (9)
- llm (9)
- system-design (9)
- startups (9)
- frontend (9)
- claude-code (9)
- developer-tools (9)
- workflow (9)
- concurrency (8)
- productivity (8)
- go (8)
- linux (8)
- nextjs (8)
- react-19 (8)
- programming (7)
- error-handling (6)
- golang (6)
- databases (6)
- interviews (6)
- architecture (6)
- ai-architecture (6)
- 2024 (5)
- reliability (5)
- career (5)
- rag (5)
- api-design (5)
- async (5)
- portfolio (5)
- htmx (5)
- leetcode (4)
- ai-agents (4)
- http (4)
- websockets (4)
- shell (4)
- automation (4)
- python (4)
- systems-programming (4)
- subagents (4)
- backend-development (4)
- learning (4)
- hooks (4)
- traits (4)
- networking (4)
- beginners (3)
- mcp (3)
- arrays (3)
- memory-management (3)
- django (3)
- real-time (3)
- tokio (3)
- map (3)
- nodejs (3)
- grpc (3)
- command-line (3)
- css (3)
- messaging (3)
- node (3)
- github (3)
- html (3)
- optimization (3)
- rust-programming (3)
- algorithms (3)
- server-components (3)
- apis (2)
- debugging (2)
- code-review (2)
- practice (2)
- writing (2)
- hiring (2)
- ai-engineer (2)
- agents (2)
- control-flow (2)
- formatting (2)
- code-style (2)
- asgi (2)
- channels (2)
- await (2)
- exports (2)
- advanced (2)
- scripting (2)
- kafka (2)
security (2)
- freelance (2)
- type-safety (2)
- protobuf (2)
- coding-tips (2)
- deno (2)
- runtime (2)
- manjaro (2)
- responsive-design (2)
- forms (2)
- serialization (2)
- generics (2)
- git (2)
- commands (2)
- open-source (2)
- api (2)
- streaming (2)
- linting (2)
- idempotency (2)
- modern-js (2)
- personal-brand (2)
- devops (2)
- macros (2)
- migration (2)
- npm (2)
- protocol (2)
- never (2)
- ux (2)
- docker (2)
- data-structures (2)
- modern-python (2)
- workflow-automation (2)
- compiler (2)
- decorators (2)
- server-actions (2)
- ajax (2)
- state-management (2)
- zustand (2)
- io (1)
- buffering (1)
- bufreader (1)
- component-props (1)
- typescript-utilities (1)
- atomics (1)
- memory-ordering (1)
- linked-list (1)
- recursion (1)
- math (1)
- documentation (1)
- ethics (1)
- governance (1)
- compliance (1)
- glossary (1)
- founders (1)
- web (1)
- planning (1)
- teams (1)
- refactoring (1)
- guide (1)
- testing (1)
- qa (1)
- cognitive-load (1)
- ifelse (1)
- match (1)
- if-let (1)
- prettier (1)
- nvim (1)
- slices (1)
- async-std (1)
- smol (1)
- commonjs (1)
- moduleexports (1)
- scripts (1)
- fastapi (1)
- axum (1)
- case-study (1)
- casting (1)
- type-system (1)
- interior-mutability (1)
- beginner-guide (1)
- openapi (1)
- devices (1)
- character-devices (1)
- block-devices (1)
- kernel (1)
- ci-cd (1)
- github-actions (1)
- team (1)
- sql (1)
- indexing (1)
- postgresql (1)
- neovim (1)
- webpack (1)
- antd (1)
- front-end (1)
- cursor (1)
- ide (1)
- assistant (1)
- custom (1)
- fine-tuning (1)
- rusty_v8 (1)
- v8 (1)
- ops (1)
- webcrypto (1)
- raft (1)
- objects (1)
- dynamic-keys (1)
- dictionary (1)
- rust-analyzer (1)
- build-issues (1)
- cache-cleaning (1)
- module-system (1)
- file-system (1)
- fs (1)
- flatmap (1)
- functional-programming (1)
- flexbox (1)
- foreach (1)
- loops (1)
- design-pattern (1)
- rustfmt (1)
- encoding (1)
- http2 (1)
- auth (1)
- oso (1)
- prompt-engineering (1)
- communication (1)
- explanation (1)
- user-perspective (1)
- force (1)
- version-control (1)
- copilot (1)
- vscode (1)
- zero-values (1)
- structs (1)
- maps (1)
- optional-fields (1)
- errors (1)
- goroutines (1)
- parallelism (1)
- json (1)
- realtime (1)
- internal-tools (1)
- outerhtml (1)
- swap (1)
- hx-trigger (1)
- dynamic-events (1)
- caching (1)
- today-i-learned (1)
- husky (1)
- imports (1)
- iteration (1)
- intoiterator (1)
- iter (1)
- nil-pointer (1)
- segmentation-fault (1)
- java (1)
- memory-safety (1)
- borrow-checker (1)
- async-await (1)
- promises (1)
- es-modules (1)
- esm (1)
- modules (1)
- optional-chaining (1)
- nullish-coalescing (1)
- rabbitmq (1)
- langchain (1)
- workflows (1)
- file-management (1)
- system-administration (1)
- linkedin (1)
- programs (1)
- load-balancer (1)
- dynamic-programming (1)
- palindromes (1)
- sliding-window (1)
- hashmap (1)
- string-manipulation (1)
- macro_rules (1)
- syntax (1)
- object (1)
- key-value (1)
- ecmascript-6 (1)
- algorithm (1)
- binary-search (1)
- array (1)
- divide-and-conquer (1)
- eslint (1)
- integrations (1)
- integration (1)
- multi-trait-objects (1)
- types (1)
- npx (1)
- cli (1)
- development-tools (1)
- oneshot-channel (1)
- async-programming (1)
- futures (1)
- orphan-rule (1)
- newtype-pattern (1)
- faillock (1)
- pam (1)
- authentication (1)
- modularity (1)
- resume (1)
- pubsub (1)
- queues (1)
- dataclasses (1)
- pattern-matching (1)
- type-hints (1)
- type-annotations (1)
- static-typing (1)
- anti-patterns (1)
- usedeferredvalue (1)
- usetransition (1)
- concurrent (1)
- validation (1)
- upgrade (1)
- core-web-vitals (1)
- bundle-analysis (1)
- full-stack (1)
- useoptimistic (1)
- requestanimationframe (1)
- animation (1)
- useref (1)
- useeffect (1)
- effects (1)
- cleanup (1)
- strict-mode (1)
- react-18 (1)
- real-time-updates (1)
- scalability (1)
- redis (1)
- collaboration (1)
- teamwork (1)
- reflect (1)
- meta-programming (1)
- tailwind-css (1)
- css-grid (1)
- deployment (1)
- development (1)
- spawn (1)
- spawn_blocking (1)
- block_on (1)
- rust-180 (1)
- release-notes (1)
- ast (1)
- mutability (1)
- closures (1)
- functional (1)
- immutability (1)
- iterators (1)
- declarative (1)
- procedural (1)
- derive (1)
- privacy (1)
- sealing-patterns (1)
- strings (1)
- memory (1)
- compilers (1)
- rustc-internals (1)
- satisfies-operator (1)
- web-fundamentals (1)
- gin (1)
- shouldbindjson (1)
- bindjson (1)
- metrics (1)
- impact (1)
- signals (1)
- vue (1)
- svelte (1)
- htmx-190 (1)
- sizedness (1)
- stack-trace (1)
- stack-unwinding (1)
- ports (1)
- process-management (1)
- ss (1)
- lsof (1)
- fuser (1)
- dynamic-content (1)
- frontend-development (1)
- blogging (1)
- seo (1)
- technical-writing (1)
- storytelling (1)
- engineering (1)
- software-quality (1)
- team-culture (1)
- lifetimes (1)
- hash-table (1)
- type-inference (1)
- programming-concepts (1)
- conditional-types (1)
- advanced-types (1)
- metadata (1)
- aop (1)
- common-mistakes (1)
- use-server (1)
- react-server-components (1)
- useactionstate (1)
- form-handling (1)
- unicode (1)
- utf-16 (1)
- code-points (1)
- embeddings (1)
- code-search (1)
- similarity (1)
- consumers (1)
- tcp (1)
- coding (1)
- professionalism (1)
- motivation (1)
- code-quality (1)
- personal-growth (1)
- proposals (1)
- projects (1)
- state (1)
- Published on
How I built a custom code execution engine backed by a Rust/Axum microservice, embedded directly in blog articles. Covers the security model, subprocess isolation with setrlimit, HMAC request signing, and the tradeoffs behind every decision.